References https://avd.aliyun.com/detail?id=AVD-2023-1668494 https://zone.ci/e/tags/index.php?page=2&tagname=%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96%E6%BC%8F%E6%B4%9E&line=25&tempid=11 https://www.mapgis.com/index.php?a=shows&catid=312&id=421 https://avd.aliyun.com/high-risk/list?page=21 https://blog.csdn.net/supermapsupport/article/details/148233457 https://github.com/Sec-Fork/POC-20250106/blob/main/ArcGIS/ArcGIS%E5%9C%B0%E7%90%86%E4%BF%A1%E6%81%AF%E7%B3%BB%E7%BB%9F%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96%E6%BC%8F%E6%B4%9E.md https://www.yisu.com/cve/39269.html https://cn-sec.com/archives/3438383.html
Related Vulnerabilities金蝶eascloud管理控制端任意文件上传PoCCVE-2026-29962: HSC MailInspector - Local File InclusionPoCCVE-2026-85200: GEO my WP <=4.5.5.3 - Unauthenticated Local File Inclusion关于U9 cloud存在接口XML注入漏洞的安全通告关于U9 cloud存在接口SQL注入漏洞的安全通告关于U9 cloud存在接口无授权访问漏洞的安全通告关于U8cloud所有版本CodeSyncServlet接口存在任意文件下载漏洞的安全通告关于NC Cloud及YonBIP高级版系统的公共入口接口漏洞安全通告旭辰資訊|SmartIT Desktop Manager - 存在4個漏洞关于用友GRP-U8Cloud产品getUsersList及getNoteCode存在信息泄露漏洞的安全通告PoCCVE-2026-55229: Gotenberg < 8.34.0 - Local File Disclosure中成科信票务管理系统 /SystemManager/TicketSystem/ReturnTicketPlance.ashx SQL 注入漏洞中成科信票务管理系统 /SystemManager/Planetarium/ReserveTicketManagerPlane.ashx SQL 注入漏洞